This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/k2Fusz5WT5KzGZDYS5x4qWS-dDk.roa File: k2Fusz5WT5KzGZDYS5x4qWS-dDk.roa (raw, json) Hash identifier: qf/79b7ucCNiC6y5aEVExS6HbtWA5nyu3Wz/pMt8kZQ= Subject key identifier: 93:61:6E:B3:3E:56:4F:92:B3:19:90:D8:4B:9C:78:A9:64:BE:74:39 Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c Certificate serial: 019B7F14454DB43868C0F17473C559C48BC7 Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/k2Fusz5WT5KzGZDYS5x4qWS-dDk.roa Signing time: Fri 02 Jan 2026 14:19:53 +0000 ROA not before: Fri 02 Jan 2026 14:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34665 IP address blocks: 147.45.34.0/24 maxlen: 24 147.45.36.0/24 maxlen: 24 147.45.64.0/24 maxlen: 24 147.45.192.0/24 maxlen: 24 147.45.207.0/24 maxlen: 24 193.233.30.0/24 maxlen: 24 193.233.61.0/24 maxlen: 24 193.233.197.0/24 maxlen: 24 193.233.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:45:4d:b4:38:68:c0:f1:74:73:c5:59:c4:8b:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c Validity Not Before: Jan 2 14:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=93616eb33e564f92b31990d84b9c78a964be7439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ac:4f:a9:2b:11:f3:ea:60:fa:8b:58:69:91: fe:56:45:64:7e:c5:19:8b:40:39:d6:7f:fd:3a:ab: 5e:78:ee:44:e3:ae:c5:72:a2:b7:76:65:30:f1:b9: b1:c0:e7:46:b0:0f:c1:0d:49:58:55:96:1e:65:ba: a6:24:74:ac:d0:e5:1e:7f:9c:a2:51:09:58:89:65: 7d:55:3c:f3:fe:32:da:9d:97:da:77:f8:74:67:d5: 56:20:35:38:aa:5e:95:86:9f:8f:8d:3d:5c:b0:19: 5a:01:36:f8:3a:4a:70:e6:14:16:4c:c5:89:db:ac: cc:ea:da:5d:b2:4b:31:f5:9d:d7:2b:b6:4a:4f:48: d5:96:fe:5c:68:eb:cb:64:8b:1b:6f:ec:f5:65:18: 3a:9e:d4:c4:e3:59:d0:7f:46:13:8e:52:a4:a5:a2: 63:17:0b:75:18:de:bc:a7:05:dd:1c:bf:0f:92:7b: 39:4b:7a:a3:ba:45:63:07:06:06:ed:fd:8e:d9:88: 52:37:a8:52:df:8f:e4:01:c1:4e:30:da:f7:94:12: 9c:29:a4:cb:e3:64:b7:28:db:41:20:c4:3f:44:c1: ec:cb:93:f2:df:4f:a0:7b:7f:6a:7d:35:1f:59:c1: c9:d7:40:13:2d:00:67:52:d7:e0:9f:e2:91:bb:7e: 5a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:61:6E:B3:3E:56:4F:92:B3:19:90:D8:4B:9C:78:A9:64:BE:74:39 X509v3 Authority Key Identifier: keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/k2Fusz5WT5KzGZDYS5x4qWS-dDk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.45.34.0/24 147.45.36.0/24 147.45.64.0/24 147.45.192.0/24 147.45.207.0/24 193.233.30.0/24 193.233.61.0/24 193.233.197.0/24 193.233.234.0/24 Signature Algorithm: sha256WithRSAEncryption 99:54:b4:4c:67:3c:0e:ce:be:28:c2:69:5a:21:34:b9:fa:bb: 49:74:16:66:8f:6b:4f:dd:69:99:57:94:8e:fc:4c:6d:52:36: cc:ff:71:05:5e:0d:f8:db:ce:c9:a7:4d:1e:01:73:ef:1a:83: a4:bf:cf:da:ae:6b:f6:a1:30:5e:c3:2f:76:b5:4f:b0:65:48: 36:c6:9d:24:47:f2:44:2e:91:67:e8:1c:91:88:c0:3c:b7:c1: 33:45:ec:48:de:fe:0a:15:23:3c:4d:86:bf:6b:ab:65:e7:8d: f8:86:28:23:1f:29:02:46:57:5f:74:5b:78:f5:b9:e1:9d:b9: 88:90:9f:77:98:85:bf:8b:c7:f0:69:1d:e5:c6:0f:24:76:82: 1b:6c:29:fe:3e:f5:c1:13:60:6c:1c:ba:8d:77:26:07:a0:7d: 63:5e:47:38:44:6e:00:e0:fb:81:75:1b:1a:da:43:85:72:d6: a1:69:81:53:f5:9c:1a:d3:1e:ea:9d:9f:a7:19:ed:02:af:c4: 08:a8:d3:16:05:bb:79:55:cf:da:49:4b:42:82:c6:a1:e6:91: b7:33:64:fc:18:31:3a:1a:41:22:d3:d3:29:51:e4:77:da:32: 96:20:0e:73:2c:46:d7:79:83:b2:5c:87:f8:37:8d:e0:40:af: 27:c0:23:a5 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZt/FEVNtDhowPF0c8VZxIvHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4 Mjg3M2MwHhcNMjYwMTAyMTQxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MzYxNmViMzNlNTY0ZjkyYjMxOTkwZDg0YjljNzhhOTY0YmU3NDM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4qxPqSsR8+pg+otYaZH+VkVkfsUZ i0A51n/9OqteeO5E467FcqK3dmUw8bmxwOdGsA/BDUlYVZYeZbqmJHSs0OUef5yi UQlYiWV9VTzz/jLanZfad/h0Z9VWIDU4ql6Vhp+PjT1csBlaATb4Okpw5hQWTMWJ 26zM6tpdsksx9Z3XK7ZKT0jVlv5caOvLZIsbb+z1ZRg6ntTE41nQf0YTjlKkpaJj Fwt1GN68pwXdHL8Pkns5S3qjukVjBwYG7f2O2YhSN6hS34/kAcFOMNr3lBKcKaTL 42S3KNtBIMQ/RMHsy5Py30+ge39qfTUfWcHJ10ATLQBnUtfgn+KRu35aSQIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFJNhbrM+Vk+SsxmQ2EuceKlkvnQ5MB8GA1UdIwQY MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt NGRlYzRkYWZlZTQ5LzEvazJGdXN6NVdUNUt6R1pEWVM1eDRxV1MtZERrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5 LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAky0iAwQA ky0kAwQAky1AAwQAky3AAwQAky3PAwQAwekeAwQAwek9AwQAwenFAwQAwenqMA0G CSqGSIb3DQEBCwUAA4IBAQCZVLRMZzwOzr4owmlaITS5+rtJdBZmj2tP3WmZV5SO /ExtUjbM/3EFXg34287Jp00eAXPvGoOkv8/armv2oTBewy92tU+wZUg2xp0kR/JE LpFn6ByRiMA8t8EzRexI3v4KFSM8TYa/a6tl5434higjHykCRldfdFt49bnhnbmI kJ93mIW/i8fwaR3lxg8kdoIbbCn+PvXBE2BsHLqNdyYHoH1jXkc4RG4A4PuBdRsa 2kOFctahaYFT9Zwa0x7qnZ+nGe0Cr8QIqNMWBbt5Vc/aSUtCgsah5pG3M2T8GDE6 GkEi09MpUeR32jKWIA5zLEbXeYOyXIf4N43gQK8nwCOl -----END CERTIFICATE-----Generated at Tue Jan 20 11:09:50 2026 by rpki-client